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[57] ABSTRACT 

A power network control system has a plurality of 
digital modules interconnected. A master logic unit in 
the network communicates with a specialized protocol 
to slave logic units in each module. The slave logic unit 
can instruct a power control circuit to turn-off or turn- 
on various power supply modules in addition to adjust- 
ing a power module in steps of plus or minus fixed 
percentage amounts. 
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FIG.11. 
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FIG.12. 
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FIG 13 
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FIG.14. 
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FIG. 16. 
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power-up or to power-down the unit thus to provide 
POWER CONTROL NETWORK FOR MULTIPLE the utmost flexibility and also provide the utmost in 
DIGITAL MODULES energy conservation permissible under the circum- 



FIELD OF THE INVENTION 



stances. 

SUMMARY OF THE INVENTION 



This disclosure involves the field of computer system 
networks and is specifically directed to handling the H h *$ 'ong ***n a problem in a complex system net- 
problems of power control in each of the various units work which involves a multitude of independent pro- 
involved in the system network, by the use of a master- cesser*, independent I/O systems, and independent 
slave logic system. 10 memory systems to regulate the "on-off-ness" of power 

and the power status of each of the units in the system 

CROSS REFERENCES TO RELATED whcn ^ A uniu arc ablc to communicate with each 

APPLICATIONS other 

This disclosure is related to a patent application filed The present system provides a central master power 

Sept. 25, 1984 as U.S. Ser. No. 654,080, now U.S. Pat. 15 control logic unit which can communicate with a slave 

No. 4,635,195 issued Jan. 6, 1987 entitled "Power Con- power control logic unit which is located in each indi- 

trol Network Using Reliable Communications Proto- vidua! system cabinet of the system. The central master 

coP by inventors James H. Jeppcsen, III and Bruce E, power control logic unit can poll, and selectively ad- 

Whittaker. dress each and every unit in the system in order to 

BACKGROUND OF THE INVENTION 2 ° coniTo] , thc OTndi ? ion of t its P° wcr 85 t0 ***** °* <> r off ' 

or to select marginal voltage conditions, or to find out 

In the present day advance of computer and commu- the power status of that particular unit, 

nications network technology, it is now possible that Thus, one central location can operate to control and 

many types of units are interconnected both by direct monitor the power conditions of each unit in the entire 

bus connection and by remote telephone lines. These 25 system ^ (hat nQ ^ ^ inadvcrtent | y ofr . linc or shut 

networks may involve a variety of processors, a variety down or dcpowcrcd without the knowledge of the 

of input/output systems located in separate cabinets, central master power control logic unit, 

plus other cabinetry in addition to large portions of In this regard a nmUtf |ogic unit ^ s|ave logic unit 

memory cabinetry. , , n operate with a specialized protocol having exceptional 

In such a separate and complex network one major 30 rcljabiJi where thc transfI)its a ^ addreB 

problem often arises as to the conditions of the supply ^ ^ u ^ ^ ^ M , y^n^ slavc 

power at each of Oie uidiv.dual units in order that this rcturns , ^ ^ mflSter unit ]t is 

system may operate mtercooperatively and efTecUvely. * instructional 

For example, it is never known what the status or 7 . . 4 . . 

power condition of each of the interconnected units 35 command data to the slave una. 

may be in relationship to the units which are powered . Thc slave {o * c mii thcn t f ansmj ?f P° w * r cont ^° 1 

up and operating instructions to a power control circuit which executes 

Many times certain areas of the network may not be POweron/ofT operations or executes marginal step volt- 
desired for use and in order to save power and energy, age adjustments on various ones of the power supply 
it is desired that these units be turned off for certain 40 modules attached to that power control circuit, 
periods of time when not in use. Likewise, other units of BRIEF DESCRIPTION OF THE DRAWINGS 
this system may be desired for use and will need to be ....... 

controlled or checked to make sure that the power F1G - 1 illustrates a network of cabinets which house 

conditions in these units are properly up. processors, I/O systems and memories whereby a 

Thus, in order to provide control and flexibility in a 45 P°wer control network is connected to command and 

system and to make sure that all those units that are control the power conditions within each and every one 

needed are powered up and operable, and those units of the connected cabinets. 

which are not needed can be turned off to save energy FIG. ^ is a block diagram of a typical processor type 

and unnecessary use, it is important to system operators cabinet and its connection to the power control net- 

that some means be devised for knowing the power 50 work. 

status of each and every unit in the system and also for FIG. 3 shows a "dependently-powered" input/out- 
being able to "centrally control", that is to say, to put cabinet in block diagram form and its connection to 
power up or to power down, each and every unit in the the power control network. 

system as required. FIG. 4 is a block diagram showing an "independent^ 

To this end, the problems have been handled in this 55 ly-powered" cabinet and its connection to the power 

arrangement only catch as catch can, with the hope that control network. 

each unit is powered up properly and each unit is suffi- FIG. 5 is a basic block diagram of the power control 

ciently powered up to operate properly. Generally network showing the central power net master logic 

there has been no flexibility as to be able to shut down unit connected to control various power net slave logic 

certain unused units when they are not needed also. 60 units in this system. 

The presently devised power control network system FIG. 6 is a block diagram showing the interconnec- 

overcomes the major inadequacies involved in a large tion between the master logic unit and the slave logic 

computer system network by providing a centralized units in the system. 

power control logic system whereby thc each and FIG. 7 is a block diagram of a typical power slave 

every one of the modules or cabinet units in this system 65 logic unit. 

may be communicated to, in order to find out their FIG. 8 is a block diagram of the master network 

power status; and further commands may be transmit- power logic unit showing the interconnections to the 

ted to each addressed element in the system in order to other parts of the system network. 
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FIG. 9 is a block diagram of the peripheral power 
slave logic unit showing its connection to a peripheral 
cabinet and to the power control network of FIG. 5. 

FIG. 10 is a schematic diagram showing the protocol 
used for communication between master and slave units 5 
and additionally the byte format used. 

FIG. 11 is a flow diagram which summarizes the 
protocol activity for the master power network logic 
unit. 

FIG. 12 is a flow diagram which summarizes the 10 
protocol activity of the slave power control logic unit 

FIG. 13 is an illustration showing the output signals 
from the slave logic to the power control circuit. 

FIG. 14 is an illustration showing the input signals 
from the power control circuit to the slave logic unit. 15 

FIG. 15 shows a block diagram illustrating the cir- 
cuitry for failure detection and power control 

FIG. 16 is a block diagram illustrating the circuitry 
for margin control voltages in local and remote modes. 

GENERAL OVERVIEW Z ° 

This subsystem relates to a computer network and 
system which interconnects the following type of cabi- 
nets: 

(a) processor cabinets; 25 

(b) dependently-powered I/O cabinets; 

(c) independently-powered I/O cabinets; 

(d) independently-powered memory cabinets. 

A "dependently-powered M cabinet is a cabinet which 
derives its AC power and its high voltage input DC 30 
power from another cabinet (other than itsclf>— in this 
case the other cabinet is called the "processor cabinet". 
Thus, the "dependently-powered" cabinet must be 
physically attached to the source cabinet. 

An "independently-powered" cabinet is a cabinet 35 
which has its own AC power Source. It may, therefore, 
be considered as a "free-standing" unit. 

FIG. 1 indicates a block diagram of the network 
power control subsystem 10. Shown therein are a de- 
pendent power I/O cabinet 20 and 30, in addition to 40 
two processor cabinets 40 and 50. Additionally con- 
nected to the power control network are the indepen- 
dent power I/O cabinets 60 and 70. 

FIG. 2 shows the power components of processor 
cabinets 40 and 50 which were shown in FIG. 1. The 45 
power energization of the processor cabinets 40 and 50 
is controlled by the power control card 00 shown in 
FIG. 2. The power control card 80 is controlled by a 
"system operator" through the cabinet control circuits 
via an "operator panel" 44, and by the operating main- 50 
tenance personnel who work through the control dis- 
play 45 (maintenance switches and indicators) within 
the processor cabinet. 

The power control card 00 additionally monitors the 
cabinet environmental conditions such as over-tempera- 55 
ture and cooling air-loss. This card is further described 
later under the title of "Power Control Subsystem**. 

The state of the cabinet power is further controlled 
by the power control network (PCN) through a card 
called the Power Net Slave Card 90. The processor 60 
cabinet (40, 50) also provides an AC power module 41 
and a DC power module 43 for providing a high volt- 
age DC to the attached-dependently-powered cabinets 
such as 20, 30. 

FIG. 3 illustrates the power components involved in 65 
the "dependently-powered" cabinets such as 20 and 30 
of FIG. 1. The power for these "dependently-powered" 
cabinets is controlled by the power control card 80,/. 



566 

4 

This power control card 80,/ is controlled by a system 
operator (operating technician) through the cabinet 
control circuits and operator panel 44</, and also by the 
operating maintenance personnel through the control 
display 45</ (via maintenance switches and indicators) 
inside the cabinet. 

The power control card 80,/ also is used to monitor 
the cabinet environmental conditions such as over-tem- 
perature and the cooling air-loss. 

The power in the dependentiy powered I/O cabinet 
of FIG. 3 is also controlled by the power control net- 
work through the power net slave card 90^. 

As seen in FIG. 3 the "dependently-powered" I/O 
cabinet (such as 20 and 30) receive their AC and their 
high voltage DC input voltage from the attached pro- 
cessor cabinets such as 40 and 50 of FIG. 1. 

In FIG. 4 there is shown a block diagram of the vari- 
ous power components of the "independently-pow- 
ered" cabinets such as 60 and 70 of FIG. 1. The power 
for these independently-powered cabinets is controlled 
by the power control card 80/. The power control card 
80/ is controlled by a "system operator" through the 
cabinet control circuits and operator panel 44,- and also 
by the operating maintenance personnel through the 
control display 45/ (via maintenance switches and indi- 
cators inside the cabinet). 

Likewise, as previously described, the power control 
card 80/ also monitors the environmental conditions in 
the cabinet such as over-temperature or the loss of 
"air". The cabinet power of the independently-powered 
cabinet of FIG. 4 is also controlled by the power con- 
trol network through the power net slave card 90/. 

As seen in FIG. 4 the "independently-powered" I/O 
cabinets contain two I/O backplanes which are referred 
to as backplane A, 70 fl , and also backplane B, 70*, in 
addition to two interface panels described hereinafter. 
The DC power to each backplane is separately con- 
trolled. The DC power to both interface panels will be 
supplied the same as on backplane A, 70„. 

The operator panel 44/ will provide separate controls 
for each backplane. The power control network (PCN) 
will also provide separate controls for each of the back- 
planes 70 tf and 70*. 

The DC power to each backplane is controlled sepa- 
rately. The operator panel 44/ will provide separate 
controls for each backplane and also the power control 
network connections 95„ shown in FIG. 4 will provide 
separate controls for each backplane. 

Thus, the independently-powered cabinets will have 
their own AC power source and therefore may be con- 
sidered as "free standing**. 

Additionally, the "independently-powered" memory 
cabinet may provide a remote support interface adapter. 
This adapter adds the power net master logic card to 
the cabinet as discussed hereinafter. 

DESCRIPTION OF PREFERRED EMBODIMENT 

Power Control Network (PCN): 

To provide an integrated system, a Power Control 
Network (PCN, FIGS. 1 and 5, via 95„) connects all 
system cabinets. This allows a "SINGLE-POINT* of 
on-site operator control of the entire system of many 
cabinets. That is, the on-site operator need only depress 
a single power-on or power-off switch to control the 
entire system. 

In addition to the single-point of on-site control, the 
PCN provides total "power control" from an externa) 
remote support center 300 via telephone connection. 
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With the integrated PCN system, only a single remote 
connection is needed to drive the entire system. 

In addition to the basic power on and off control 
functions, the PCN provides a number of system fail- 
ures and status monitoring functions and system mainte- 
nance controls. These functions are described in para- 
graphs that follow. 

The PCN allows the capability for an UNAT- 
TENDED site, that is, no local system operator is re- 
quired. Aii system power controls, failure condition 
monitoring, and maintenance controls are available via 
the PCN to the remote center, 300. 

The PCN is specifically implemented through power 
net slave cards contained in each system cabinet and 
interconnected to the PCN. Each slave card is "always" 
powered, that is, is powered if the AC breaker for its 
cabinet is on. The slave within a cabinet is powered 
whether the cabinet operating DC power is on or not. 

The power net master logic card 100 of FIG. 8, 
which is part of the before mentioned remote support 
interface adapter (contained within an independently- 
powered memory cabinet), drives the Power Control 
Network and therefore all the power net slaves. The 
master logic unit 100 provides the central hub between 
the power control functions (Power Control Network), 
the remote support center (300) telephone connection 
and the system maintenance (200, PIG. 8) subsystem. 
The master card 100 is also "always" powered. 

TABLE 1 

OPERATOR PANELS 

Operator Control Panels 
The Operator Coolrol Panels 44, 44* 44,, 
FIGS. Z, 3, 4, are accessible lo the operator on the 
outside of the respective cabtocts. The panels provide 
the following functions: 

PROCESSOR CABINET OPERATOR PANEL (44) 
POWER-ON/POWER-OFF indicator A switch. 
CABINET/SYSTEM MODE indicator A switch. 
POWER FAIL/AIR LOSS indicator. 
DEPENDENTLY-POWERED 
I/O CABINET OPERATOR PANEL (44 j) 
POWER-ON/POWER-OFF indicator A switch. 
CABINET/SYSTEM MODE indicator A switch, 
POWER FAIL/AIR LOSS indicator. 
INDEPENDENTLY-POWERED 
MEMORY CABINET OPERATOR PANEL (44/) 
POWER -ON/POWER-OFF BACKPLANE A indicator 
A twitch. 

POWER -ON/POWER-OFF BACKPLANE B indicator 
A switch. 

CABINET/SYSTEM MODE indicator A switch. 
POWER FAIL/AIR LOSS indicator. 
REMOTE MODE ENABLE key gwitch. 
I NDEPENDENTL Y-POWERED 
I/O CABINET OPERATOR PANEL (44/) 
POWER-ON/POWER-OFF BACKPLANE A indicator 
A switch. 

POWER-ON/POWER-OFF BACKPLANE B indicator 
A switch. 

CABINET/SYSTEM MODE indicator A switch. 
POWER FAIL/AIR LOSS i 



(A) Cabinet Power Control Functions: 

The cabinet power control circuitry controls and 
monitors all the power modules of the various cabinets. 
It also monitors the various cabinet environmental con- 
ditions such as over-temperature, etc. 

The power control circuitry of the network system 
can be controlled from three sources: 

(1) by the operator through the cabinet operator 
panel 44; 



(2) by maintenance personnel through the control 
display 45; 

(3) by the power control network through the net- 
work interface slave as will be discussed in connection 

5 with FIG. 5. 

The operator panel control switches, in element 44, 
are active only when the cabinet is in the "cabinet 
mode" with the exception of the processor's power- 
on/power-off functions, and the cabinet/system switch. 
10 Table I indicates the switches for both the cabinet mode 
or system mode. 

The maintenance switches are active only when the 
cabinet is in the "cabinet mode". 
The power control network drive functions (the 
15 switch type functions) are active only when the cabinet 
is in the "system mode". The power control network 
monitor functions (that is the status) are always valid. 

When a cabinet is changed from the "system" to the 
"cabinet" mode, the power state of the cabinet will not 
20 change, except that marginal conditions will follow the 
cabinet margin switches. 

When a cabinet is changed from the "cabinet" to the 
"system" mode, the power state of the cabinet will 
follow the external power control signals derived from 
25 the slave units, as 90, 90j, 90/, etc. 

(B) Functions of the Cabinet Maintenance Power 
Control: 

Maintenance personnel can control the following 
maintenance functions from the control display 45 
30 (FIGS. 2, 3, 4) within a cabinet: 

(a) Margin indicators; these are used to indicate that 
the associated logic voltages within the cabinets are in a 
marginal high or marginal low state; 

(b) Margin switches— these will manually set the 
35 associated logic voltages within the cabinet to the mar- 
ginal high or marginal low state. These switches are 
active in the "cabinet" mode only; 

(c) Power fail indicators— these indicate that a power 
failure has occurred in one of the power modules within 

40 the cabinet. This indicator is valid in either the "cabi- 
net" or in the "system" mode; 

(d) Over temperature/air loss failure indicators— will 
indicate an over temperature or an air loss condition in 
the cabinet. This indicator operates in either the cabinet 

45 or the system mode; 

(e) Power fault indicators — these will indicate faults 
in the various power modules in the cabinet and they 
will operate validly in either the "cabinet" mode or the 
"system" mode. 

50 (C) Operator Power Control Functions: 

Certain functions are controlled by the "system oper- 
ator" from the cabinet control operator panel 44. These 
are: 

(1) Power-on/power-off switch indicator: in the 
55 "cabinet" mode this switch controls the state of the 

cabinet power (on or ofl). In the "system" mode this 
switch is inactive except for the processor cabinet 
switch. The processor power-on/power-off switch, in 
the "system" mode, acts as system control switches. 

60 Activation of this switch in the "system" mode will 
cause b "power-on" request or a "power-ofT request to 
be sent to the power control network. The network 
may then drive the power-on or drive the powcr-ofT to 
all system cabinets which are in the "system" mode. All 

65 cabinet "powcr-on/power-ofT indicators are valid for 
either the cabinet mode or the system mode. 

(2) The cabinet/system mode switch: this controls the 
"mode" of the cabinet. This switch is always active 
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whether the cabinet is in the "cabinet 1 * mode or the and is shut down. This is reported for the + 5 VDC, -2 

"system" mode. VDC, -4.5 VDC, + -12 VDC and 15 KW supplies. 

(3) Power fail/air loss indicators: these indicate the (13) Voltage Margin Status: Indicates a specific volt- 
respective failure conditions within the cabinet and the age supply is running in a margin condition. This is 
indicators are valid in either the cabinet mode or the 5 reported for +5 VDC, -2 VDC, and -4.5 VDC 
system mode- supplies in both high and low conditions. 

(4) Remote enable switch: this key lock switch ena- 0*) Power-On Request Status: Reported only by 
bles the connection to be made to the remote system processor cabinets in "system" mode. It indicates that 
support center 300. This key switch is active in either the power-on switch was depressed by the operator. In 
the cabinet mode or the system mode. !0 system mode, this switch is ine power-on switch tor the 

(D) Power Control Network (PCN) Functions: en ** r * «Jjf- „ n ^ ^ _ _ 

Table I and paragraph C above described the func- 0*) Power-OfT Request Status: Reported only by 

tions that an on-site operator can control via the opera- processor cabmets in system mode. It indicates that 

tor panels 44 for each cabinet. Paragraph B above de- * e power-ofT switch was depressed by the operator In 

scribed the additional functions that a maintenance en- » s V stem modc ' thls > wltch 18 lhe POwer-ofT switch for the 

gineer can control from the maintenance panels "inter- entire site. 

nal" to each cabinet. The Power Control Network . C° ntrol Nctwork E»cctncal/Mechanical 

allows remote control *^ THe'pCN Sown in FIGS. 5 and 6 is serially routed, 

tions. n this context, remote ^^^^ 20 two-wire, twisted-pair. The PCN circuit uses RS422 

cabinet, that is, ^Wlo "^^^^ standard differential drivers and receivers (FIG. 6). 

from the site itself that is, via telephone conation on the PC N will be numerous power net 

Each system cabinet ^uniquely ^s^ 1 * 5 ov f the slaves and peripheral slaves and one power net master. 

Power Control Network (PCN) PCN comrn^ds are ^ ^ of connections is £ ^ maiimuni 

actions to a cabinet driven by the PCN. PCN com- 25 tRmsfer ^ ^ }QK bjts/second . 

mands can only affect a cabinet when it is in system ^ 6 shows &e connection of the RS422 drivers 

mode, described in paragraph A above. PCN status is ajld rec€ivCTS for s | ave the master card. Also 

information about the cabinet returned over the PCN shown ^ (he network termination resistors of 120 and 

PCN status is available in either "system" or "cabinet 47Q ohms 

local modes. For cabinets with separately controllable ^ Each s|ave and mMter ^ providcs two PCN 

backplanes, the PCN functions are selected separately (p ower Control Network) connectors. One connector 

for each backplane. receives the PCN cable from the previous unit and the 

The PCN (Power Control Network) functions are: other connector sends the PCN cable to the next unit. 

(1) Power-On Command: Turns the addressed cabi- -ph e p^jsj ls tnus serially routed. 

net to power on. 35 p or pcN connections between units within attached 

(2) Power-Off Command: Turns the addressed cabi- cabinets, the PCN cable is a simple, inexpensive, twist- 
net to power off. ed-pair cable. 

(3) Reset Command: Resets, clears any power fault p or pcN connections to non-attached cabinets, the 
conditions within the addressed cabinet. pcn cables first are routed through interface panel 

(4) Set Margins Commands: Sets voltage margins ^ cards in an I/O cabinet through RFI shielded cable into 
conditions within the addressed cabinet for the selected the non-attached cabinet. 

voltage source to either high or low states. This is con- piG. 7 shows a block diagram for a power net slave 

trollable for the +5 VDC, —2 VDC and —4.5 VDC ca^. The diagram shows the controlling microproces- 

supplies. sor 92 and the address switches 94 which give each 

(5) Send Status Command: Requests the addressed 45 cabinet an unique PCN address. Each slave has two 
cabinet to send specified "status" information over the parallel connecting ports 96, 97 to the power control 
PCN. cards of its cabinet. The slave also provides, via circuit 

(6) Miscellaneous Control Bit Commands: Command 98, clock select or other signals and connects the RS422 
activates or deactivates four external signals which may interface to the PCN network itself. 

be used to control clock or other sources in dual proces- so FIG. 8 shows the power net master logic unit 100 

sor systems. card block diagram, and FIG. 9 shows a peripheral- 

(7) Power-On/Off Status: Indicates the power "on or slave card block diagram. This slave can also control 
off' state of the addressed cabinet. the power-on and power-off of a peripheral cabinet 

(8) System/Cabinet Mode Status: Indicates whether (disk pack controller). 

the addressed cabinet is in "cabinet" local mode (no 55 Power Network Slave Logic: 

^external" control allowed) or "system 0 mode (external As seen in FIG. 7, the power network slave logic 

control via PCN allowed). shows a logic card connected between the power con- 

(9) Over-Temperature Failure Status: Indicates that trol circuits of a cabinet and the power control network, 
the addressed cabinet has experienced an over tempera- A major element of the slave logic card is a micro- 
ture condition and is shut down. 60 processor such as an 8748 chip which contains internal 

(10) High-Temperature Warning Status: Indicates program PROM and internal RAM. A typical chip of 
that the addressed cabinet is running under conditions this designation is manufactured by Intel Corporation, 
outside of range and over-temperature failure may be whose address is 3065 Bowers Avenue, Santa Clara, 
imminent California, and wherein this chip is described in a publi- 

(11) Air Loss Failure Status: Indicates that the ad- 65 cation entitled "Microcontroller User's Manual", Order 
dressed cabinet has lost cooling fan(s) and is shut down. #210359-001, copyright 1982, and published by Intel 

(12) Power Fault Status: Indicates that the addressed Corporation, Literature Dept. SU3-3, of 3065 Bowers 
cabinet has experienced a power supply fault condition Avenue, Santa Clara, California. 
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Each slave logic unit has a unique address which is FIG. 1. The power network master logic will require 

set within the card by means of switches shown as ele- power from this cabinet. 

ment 94, address switches, in FIG. 7. The slave logic is The master logic 100 is the controlling device on the 

connected to the power control network of FIG. 5 power control network of FIG. 5. It initiates all com- 

using the circuits shown in FIG. 6, which are RS422 5 munications over the network; and thus, all communi- 

recciver and driver chips. The RS422 receiver and cations over the network are effectuated between the 

driver chips are those such as typically manufactured master 100 and a slave logic unit such as 90. There is 

by Advanced Micro Devices Company of 901 Thomp- only one "active" master logic unit, such as 100, which 

son Place, (P.O. Box 453), Sunnyvale, California. These may be connected to the power control network of 

circuits are described in a publication entitled "Bipolar 10 FIG. 5 at any given time. 

Microprocessor Logic & Interface Data Book" pub- The network master logic 100 also interfaces to the 

lished by Advanced Micro Devices Company, copy- Maintenance Subsystem (200 shown in FIG. 8) through 

right 1983 mc System Control Network shown in FIG. 5. Also, as 

The power network slave logic in FIG. 7 has two indicated in FIG. 5, the power network master logic is 

ports designated as port A interface 96 and port B inter- » «ngle point of connection of the system to a Remote 

face 97. These interfaces connect to the power control Support Center (RSC, 300 in FIGS. 5 and 8). 

circuiuwithineachofthecabinetssuch.forexamplcas e ™ G * <**° the connections to the Remote 

power control card 80 of FIG. 2, power control card Su PP° rt f £^ tc ' 300 and ^ 10 thc P° wcr contro1 net " 

80,/of FIG. 3, and power control card 80,-of FIG. 4. The w wo / k ° r ™ * 

signals to and fronVthe port A96 and port B97 are de- 20 ^ seen in FIG 8 the power network «ruisterlogic 

scribed hereinafter 0,1,1 100 18 P rov,ded Wlth a microprocessor 100 w to 

^w^work slave logic unit 90 has four out- ^ ^ ™ ^'2™£2 

put signals (shown in RO. 7 aUhe = right side) ^«£™^™™ m TSi 

which may be activated or deactivated under the con- „ 0tM9 J iMllll(lwlf n „ A n ' 

^ , , . A . *_ i 4 i 25 power control network and a remote support interface 

ttol of commands sent over the powercona-ol network. ^ rCOnnects ^ microproccssor to ^ ^ote support 

Thus, these four output signals may be used in cabinets m A time ofd&y circuit 100i with battery back- 

containing a DPM (dual pott memory), or for indepen- ^ ^ ^ s for the ^ 

d ^ ™ C w°7 C f bm ^ & * m ? rder XO *; ,eCt thC ! 1 ° Ur " f ™ The power network master logic unit 100 of FIG. 8 

the DPM clocks. These four signals are individually M vides a interconnection point for the power 

controlled, raised or lowered, by commands from over CQntroI DelwoA of FIO 5> m t0 thc systcm 

the power net from the power net master logic unit 100 control network which is connected through the inter- 

° f J? G 5 1 , , . s v a face 100,. It is also the central interconnection point for 

These four output signals are driven by the slave the remote support center interface (remote diagnostic) 

logic of FIG. 7 by means of high-drive transistor type 35 0 f dement I00 f . 

logic (TTL) inverter buffer chips. The output physical The power network master logic unit 100, as the 

connection to the slave logic unit card is by "slip-on" ^ for ^ ^ network, controls all the 

posts to which clock-type, backplane type coaxial ca- actions on this network. 

bles can be attached. A grounded post is provided with In wy multi-processor system, there may be only one 

each signal post. 40 -active** power network master logic unit. Since, how- 

Thus, the Select Circuits 98 of FIG. 7 use the invert- CVCTt this unit is of considerable importance to the sys- 
er-buffer chips to provide a signal from the slave logic t em operation and maintenance, there is generally pro- 
over a coaxial cable over to the DPM (Dual Port Mem- yj dcd a spare power network master logic unit, even 
ory) back plane. though a failure in the power subsystem will not affect 

The power network slave logic unit 90 requires the 45 t he operation of the overall processing unit 

use of control signals or "always power" from the cabi- The microprocessor 100„ (Intel 8088) of FIG. 8 may 

net in which it resides. be set to run at 8 megahertz. It executes its code out of 

Two on-board indicators and one switch are used to the 32K bytes of PROM 100 m j. The 8K bytes of RAM 

control each of the power network slave logic units 90, jo0 0 are used for data buffers and for operating stacks. 

90/, 90* 90> A push-button switch (the re-set switch) is 50 The 256 bytes of electrically erasable PROM KXW are 

used to initialize the slave logic to run its own "self- used to store configuration-dependent option flags. The 

test". This is the same function that occurs at slave time of day circuit 100/ is backed up by a battery for use 

power-up time. One indicator (self-test) is "on" when during times of power failure. Six indicators and five 

the slave self-test program is in operation. If a self-test switches are provided on the master logic unit 100 for 

error occurs, this indicator will remain "on**. 55 maintenance of the master card itself. 

The second indicator (NET ERROR) is "on" when- Peripheral Slave Power Control Adaptor: 

ever the slave logic detects a "NET* problem while the As seen in FIG. 5, the power control network may 

slave is communicating on "NET". These NET errors include peripheral devices which are provided with a 

include a frarning error (too few or too many discs), a peripheral slave power control adaptor 90,. 

parity error, a NET protocol error, and an invalid com- 60 FIG. 9 shows a block diagram of such a peripheral 

mand. The "NET ERROR" indicator will be deacti- slave power control adaptor 90^. Provided therein is a 

vated when a "good" net communication to the slave microprocessor 92 p which connects to a peripheral 

logic unit occurs. power control driver circuit 9S P having connections to 

Power Network Master Logic: the peripheral cabinet. Also provided are address 

A block diagram of the power network master logic 65 switches 94, which provide an input to the micro- 
is shown in FIG. 8. The power network master logic ' processor 92p, and also a driver-receiver circuit 99, 

100 of FIG. 8 is housed in an independently-powered which connects to the power control network of FIG. 

memory cabinet within the system, such as cabinet 70 of 5. 
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The peripheral slave power control adaptor, such as will be sent about 15 seconds later after the power on/- 

90 p of FIG. 9, is located in an interface panel within the off Command was sent. 

I/O cabinets such as 60 and 70 of FIG. 1, and also in Thus FIG. 10 indicates the general network flow for 

cabinets 20 and 30 of FIG. 1. the master power logic unit 100 as it polls the various 

The peripheral slave power control adaptor 90, of 5 slaves 90 over the network. After the master logic unit 

FIG. 9 connects between the power control network of 100 sends an Address, it waits for the return of the 

FIG. 5 and any selected system peripheral cabinets, addressed slave unit's address. If an incorrect address is 

There are certain cabinet types to which the peripheral returned from the slave logic unit 90, the master power 

slave power control adaptor may be connected. These logic unit 100 will re-try the expected address. It will 

are: 10 try the desired address ihree times before it assumes that 

(a) a disk pack controller (without status signals) the Address slave logic unit 90 may be "bad". 

(b) a disk pack controller (with status signals) The master power logic unit 100 also does the same 

(c) a disk pack exchange unit (without status signals). re-try/time-out procedures for the Command bytes. 
The peripheral slave adaptor 90>provides only "pow- When the master power logic unit 100 finds an "im- 

er-on" and "power-ofT control for these cabinets. 15 properly" responding slave logic unit 90, while polling, 

The peripheral slave adaptor 90, is logically a simple it will report the condition to the maintenance subsys- 

slave unit. The microprocessor 92, may use an 8748 tern 200 over the system control network connected as 

microprocessor chip (previously described) and inter- shown in FIG. 8. 

faces to the power control network with the RS422 FIG. 10 also indicates the network byte format for 

driver receiver chip designated 99,. 20 the power network. As shown therein, there is one bit 

The peripheral slave logic of FIG. 9 differs from the used for a start bit, then 8 bits are used for a data byte, 

internal power slave logic unit of FIG. 7 in that, in place then one bit is used for odd parity, and one bit is used as 

of the port A and port B interfaces (96, 97) of FIG. 7, * stop bit ^ 

the "peripheral" slave logic has special driver circuits FIG. 11 shows a drawing of a now chart showing the 

95„in order to control the "on/ofT state of the connect- 25 network flow for the master power control logic unit 

ing peripheral cabinets. 100 which summarizes the various protocol steps used 

Power Control Network Communications: In FIG. 10 on lines 1-6. 

All commands and communications over the power FIG. 12 is a flow chart diagram which summarizes 

control network are initiated by the power net master M the protocol involved for the slave power logic unit in 

logic unit 100 of FIGS. 5 and 8. 30 th < operation. 

FIG. 10 is an illustrative drawing showing the partic- ^ Table II shows one scheme on which Addresses may 

ular sequence of events over the network. The master * provided for the processor cabinets, the independent 

logical 100 first sends the Address byte shown in line mem ^ * e "° ' t TT 

lofthedrawingofFIG.10.ThisAddressistheaddress 35 Peripheral cabinets whereby the power control net- 

of the desired slave unit to be addressed. Each slave unit 35 work system may address and communicate with spe- 

receives and evaluates the Address received and then cific cabinets in order to prov.de M and Con- 

the appropriate slave unit will return its Address to the trol functions in the power network system, 

master power unit 100. TABLE II 

If the "correct" slave address is returned to the mas- 40 power network address byte definitions 

ter power logic unit 100, as shown in line 2 of FIG. 10, Addraa Bin 

then the master logic unit 100 will send a Command 76M 3210 
byte (shown in line 3) to the previously addressed slave 
unit, such as 90 of FIG. 7. 

The slave unit, such as 90, then returns the Command 43 
byte to the master as illustrated in line 4 of FIG. 10. 
Thus, when the slave has received the Command byte, 
it returns it to the master and if the byte received by the 
master logic unit 100 then agrees with the byte that it 
(master unit) had previously sent, the master logic unit 50 

100 re-sends the Command byte again, as illustrated in Note. o»iy 64 connection* «e allowed on the network, 
line 5 showing the Command byte being re-sent from 

master to slave. Power Control Network Protocol: 

If the second Command agrees with the first Com- Since the PCN has "great power" over a system, that 
mand byte, the slave logic unit 90 will decode and exe- 55 is, it can turn off a system, it is necessary that the net- 
cute the Command received. The slave will then return work protocol be fault tolerant and reliable. The PCN 
its General Status byte to the master as seen in line 6 of protocol was designed with several layers of redun- 
FIG. 10. dancy and checking. 

If the Command was a Send Status Command, then FIG. 10 shows the PCN byte format. The PCN byte 
the specified Status byte is returned instead of the Gen- 60 contains one start bit, eight bits of information (data 

eral Status byte. byte), one odd-parity bit and one stop bit. 

If the command sent by the master logic unit 100 to a FIG. 10 also shows the PCN message transfer proto- 

slave logic unit 90 was either a "power-on" or a "pow- col between the power net master card and a slave card. 

er-ofT, then the General Status byte which is returned All transfers on the PCN are initiated by the master. All 
to the slave logic unit 90 will not reflect the new power 65 transactions follow the steps described below: 

state of the cabinet involved. It will show the status of (1) Master sends an address byte to all slaves. An 

the cabinet "prior to" the command. To check the new address byte has a "one** in the most significant bit 

state of the cabinet involved, a Send Status Command position. Each slave compares the address byte to its 
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address switches. Each slave has an unique address and states. Thus, after generating the needed control signals, 

that address values are predefined and grouped to also the slave unit will get "cabinet status** information via 

indicate that type of cabinet in which the slave is lo- circuits 96, 97 of FIG. 7. This information creates the 

cated. The master program can generate an address or "general status" byte (or other status byte depending on 

pull an address from memory 100* of FIG. 8. The mas- 5 the instruction from the master unit 100). The slave unit 

ter program gives the address to microprocessor 100„ (90, 90* 90/, etc.) will then transmit the status informa- 

which transmits it from master logic 100 to slave units tion to the master unit 100 via, for example, the driver 

90, 90* 90/, etc. via the network lines of FIG. 6. 90j of FIG. 6. When the master unit 100 gets the status 

(2) The slave, whose address switches equal the ad- information (via 100. of FIG. 8), the master program 
dress byte value, then returns its address over the FCN 10 can act on the basis of the type of information it re- 
to the master. The master checks the received value ceived. 

with the sent value to ensure the proper cabinet is re- (8) One additional safety check is performed by the 

sponding. Thus, the slave program receives the trans- master card on the status byte returned. Since power-on 

mitted address when it matches its own unique address request and power-off request status bits are so critical 

and retransmits its address via the network of FIG. 6. 15 to the entire system, these status bits are double- 

The program gets its address from the settable address checked if they are returned in the general status byte, 

switches 94 of FIG. 7. The master program in the mas- This is done as follows: 

ter logic unit compares the received-back address (a) A "send status** command is sent; the general 

which comes through 100,,of FIG. 8. This address came status byte is received for the second time to see if the 

from the slave unit 90 (or 90,/ or 90,-, etc.) via FIG. 6. 20 power-on/ofT request status bit is still active. 

(3) The master then sends a command byte to the (b) A reset command is sent to the slave in question, 
addressed slave. A command byte has a zero in the most This clears the power-on/off request bit 
significant bit position. The master program can gener- (c) A "send status** command is again sent (the re- 
ate an instruction or pull one from memory 100 tf of FIG. quest status should now be inactive). 

8 in the master logic unit. The microprocessor 100 u will 25 (d) If each step above was correct, the master will 

instruct 100,, FIG. 8, to transmit it via the circuit of execute the power-on or power-off request sequence to 

FIG. 6. the system. 

(4) If the command is a good command, the slave Any time-outs or miscompares, in any of steps 1-8 
returns the command over the PCN. The slave logic above, abort the transfer and prevent the execution of 
unit receives the instruction and the slave program 30 any action to cabinets in the system. FIG. 11 gives the 
checks the instruction for validity, then retransmits the master flow (less steps a-d). FIG. 12 gives the slave 
instruction (if valid) via the circuit of FIG. 6 back to the flow. 

master unit 100. Power Control Subsystem 

(5) The master compares the returned command with The power control subsystem shown in FIGS, 13, 14, 
the sent command; if it compares accurately, it re-sends 35 15 and 16 is used to controllably sequence various 
the command byte to the slave. Thus, the master pro- power supply modules either "on" or "ofl" and to de- 
gram then causes the master logic unit 100 to compare tect failures in the power modules or cooling systems 
the "returned-instruction" from slave unit 90 with the that could damage the logic cards, interfaces or mem- 
originally sent instruction. When these two instructions ory storage devices. 

are verified as being in agreement, the program in- 40' The power sequence control and failure detection is 

structs master logic unit 100 to transmit the instruction oriented around the power control circuit card 80 (80,, 

again over to the addressed slave unit via 100, of FIG. 80*) in conjunction with its interface to the slave logic 

8 and FIG. 6. units 90 (90/, 90</) as shown in FIGS. 13 and 14. FIG. 13 

(6) The slave compares the second command byte shows the output control signals from the slave logic 90 
with the first command byte; if they agree, it checks the 45 to the power control circuit 80. Then FIG. 14 shows the 
command, and if valid, the slave will begin execution of various "indicator** signals which the power control 
the command. Thus here, the slave unit receives the circuit provides to the slave logic 90. 

instruction for the second time and the slave unit pro- In order to control each powe r supply module on or 

gram compares this instruction with the originally re- off, a transistor type logic (TTL) compatible signal is 

ceived instruction whereupon (if both instructions coin- 50 sent to each power supply module from the power 

cide) the slave unit generates control signals. These control circuit card 80, according to instructional data 

generated control signals are placed on circuits 96, 97 or received from the slave logic unit 90. 

98, FIG. 7 (depending on the instruction) and especially Each power supply module (as 41, 43, 70 fl , 70*, of 

to the Power Control Card 80/ (FIG. 4) or to 80 d (FIG. FIGS. 2, 3, 4) will send a TTL signal back to the power 

3) or 80 (FIG. 2) via the port interfaces 96, 97 of FIG. 55 control circuit 80 (80/, 80</) to indicate if that module 

7. In the case of the peripheral slave unit 90, (FIG. 8), failed or was under voltage, over voltage, over current 

the slave unit generates a pulse which is sent to the or over temperature. Thus, the over temperature or air 

peripheral cabinet (disk control unit of FIG. 9) via cir- loss sensors of FIG. 15 can send failure signals to the 

cuit 95^ sequencer 80 v in power control circuit 80. 

(7) In response to the second command byte, the 60 As indicated in FIG. 16, a precision reference voltage 
slave returns a status byte of information to the master. unit 80 r has programmable voltage steps of + (plus) or 
The normal status byte returned contains "general sta- - (minus) 5 percent which can be controlled by input 
tus" information about the cabinets condition: on/off, signals via a local interface from margin switches 80* or 
system/cabinet local modes, any failure condition, any via a remote interface from slave logic 90. This permits 
margin condition, on/off request. If the command was a 65 "niargining** of the output voltages on each power sup- 
"send status" command, the slave will send the specific ply module. 

information desired: specific margin conditions, specific The voltage output of the logic power supplies (+5 

cabinet power failure conditions, clock select signal V, -4.5 V and -2.0) can thus be adjusted -f or -5% 
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via the "margin step function". Each power supply 
module has a +5V reference supplied by reference unit 
80, which controls the output voltage of each power 
module, and any change in reference voltage causes a 
proportional change in output voltage. 5 

The precision +5V reference voltage has two pro- 
grammable inputs for effecting + 5% and — 5% voltage 
change steps. The margin steps can be activated "lo- 
cally" by a switch or "remotely" by the slave logic 90. 
Each logic power module has its own separate refer- 10 
ence voltage and margin circuit. 

The main AC power module (such as the 15KW 
input module 41 of FIG. 15) can be set on or ofT via a 
TTL signal "S" from the power control circuit 80. 

The cabinet control panel 44 (FIGS. 2, 15) enables 15 
"local mode" operation by a technician or system oper- 
ator, and has an on/off push button with light-indicator, 
with power-fail ure/teraperatu re-fai 1 ure indicator and 
local/remote switch with indicator light. 

Thus, the two modes for controlling power on/off 
are the "local" mode and the "remote" mode. 

The local mode requires an "on-site" operator to 
manually start the power control on/off responses by 
use of an ON/OFF switch on cabinet control panel 44. ^ 

The remote mode allows the "system control" in the 
network whereby the master logic 100 (FIG. 8) in- 
structs the appropriate slave logic 90 to command cer- 
tain actions to its power control circuit 80. 

The local/remote keyswitch in the cabinet control 3Q 
panel 44 enables or disables the local/remote interface 
(FIG. 1$) in the power control circuit 80. Then depend- 
ing on what mode the system is in, the sequencer 80 9 
turns each power supply module on/off in the appropri- 
ate sequential order. 35 

If a failure signal occurs on a power module, air sen- 
sor or temperature line (FIG. 16), then the sequencer 
80 q will power off the power modules in the appropriate 
sequence. 

On "power-up" the proper sequence is to first turn on 40 
the main AC supply 41 after which power is turned on 
to the 12 V supply, then the 5 V supply and the 4.5 V 
and 2.0 V supplies. 

On "power-ofT, the sequence is effected in the re- 
verse order. 45 

As indicated in FIG. 15, each power module can 
furnish a TTL compatible "fail" signal to the sequencer 
80p in the power control circuit 80. 

The power sequencer 9Q q is a circuit which ensures 
that the main power module 41 is operating before 50 
checking the subordinate power modules, after which 
any incoming failure signal which is detected will make 
the sequencer shut off all the power modules in that 
subsystem. The sequencer 80 ? will also signal the slave 
logic 90 with a TTL compatible signal. Any failures are 55 
also indicated by light-emitting diodes which make 
reference to each power module. A similar failure indi- 
cator on the cabinet control panel 44 is also turned on. 

There has herein been described a power control 
network which interconnects a multitude of digital 60 
modules where each digital module has a slave logic 
unit capable of receiving power control instructions 
from a master logic unit The communications protocol 
between the master logic unit and any addressed slave 
logic unit insures that accurate instruction transfer will 65 
occur without error in all cases. 

While a preferred embodiment of the power control 
subsystem has been described, it should be understood 
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that other possible embodiments may be devised within 
the framework of the following claims: 
What is claimed is: 

1. In a system of interconnected modules which in- 
clude at least one processer module, at least one I/O 
module, and at least one memory module, and wherein 
each module includes internal power control switching 
means and internal power supply means, a power con- 
trol network for controlling an on/off power status or 
condition of any selected module, said power control 
network comprising: 

(a) master logic power unit means for sensing the 
power status of each of said modules and for trans- 
mitting control instructions for regulating the on/- 
off power status of a selected module, or modules, 
or all of said modules; and 

(b) slave logic power unit means for receiving said 
control instructions and for regulating the power 
status of each of said modules, said slave logic 
power unit means including: 
(bl) a plurality of slave logic units each of which is 

connected to said master logic unit means and 
wherein each of said modules is provided with 
an individual slave unit residing therein, each of 
said slave logic units including: 
(bla) means to sense the power status of the said 
internal power supply means residing in the 
same module as the said slave logic unit; 
(b2) said power control switching means operating 
under control instructions from said master unit, 
via said slave unit, for switching the power on or 
off in the module in which said slave unit resides, 
and wherein said power control switching means 
includes: 

(b2a) means to cause said internal power supply 
means to have its output increased or de- 
creased by a fixed percent amount. 

2. The power control network of claim 1, wherein 
said master logic power unit means includes: 

(a) master microprocessor means for executing pro- 
gram instructions for powering up or powering 
down the said internal power supply means in any 
selected module, and including: 
(al) means to transmit instructions to selected ones 

of said slave logic units for controlling said 
power control switching mean; 

(b) memory means connected to said master micro- 
processor means for program storage and data 
buffering; 

(c) interface means, connected to said microprocessor 
means, for providing data transfers to/from each of 
said slave logic units; and 

(d) time-of-day means for providing time signals to 
said master microprocessor means to enable unat- 
tended system power up and halt-load, and to re- 
cord the time of any unit failure. 

3. The power control network of claim 1, wherein 
each of said slave logic units includes: 

(a) slave microprocessor means for receiving and 
executing instructions from said master logic 
power unit means and for transmitting power status 
information data to said master logic power unit 
means, said slave microprocessor means including: 
(al) means for executing instructions for raising/- 

lowering the voltage of any selected local unit of 
said internal power supply means; 

(b) address switch means for setting up a unique ad- 
dress to identify each slave logic unit, said switch 
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means connected to said slave microprocessor 
means; 

(c) communication transfer circuitry for transferring 
instructions and data between said slave micro- 
processor means and said master logic power unit 5 
means; and 

(d) interface circuitry for connecting said slave mi- 
croprocessor means to said power control switch- 
ing means in said modules in order to control the 
on/off condition of power in said each of said mod- 10 
ules. 

4. The power control network of claim 3, wherein 
each of said slave logic units include: 

(a) memory clock select circuitry connected to re- 
ceive clock signals from said slave microprocessor 
means and to transmit a clock select signal to said 
memory module. 

5. In a system of interconnected modules which in- 
clude at least one processor module, at least one I/O 20 
module, and at least one memory module, a power 
control network for controlling an on/off power status 
or condition of any selected module, said power control 
network comprising: 

(a) a network master power logic unit having output 2 j 
connections to a plurality of slave power logic 
units wherein at least one slave logic unit is located 

in each of said processor modules, said I/O module 
and said memory module units, and wherein; 

(b) each of said plurality of power slave logic units 30 
include: 

(bl) slave microprocessor means for receiving and 
executing instructions from said master logic 
unit and for transmitting power status data to 
said master power logic unit; 35 



(b2) address switch means for setting up a unique 
address to identify each slave power logic unit, 
said address switch means connected to said 
slave microprocessor means; 

(63) memory cloc select circuitry connected to said 
memory module to select which processor mod- 
ule will supply clock select signals to said mem- 
ory module; 

(B4) interface circuitry for connecting said slave 
microprocessor means to an associated power 
control switching means in each of said modules 
in order to control the conditions of power in 
each of said modules; 

(b5) communication transfer circuitry for transfer- 
ring instructions and data between said slave 
microprocessor means and saiid master power 
logic unit; 

(c) a plurality of power control switching means in 
each of said modules, wherein each power control 
switching means includes: 

(cJ) means to receive instructions from its slave 
logic unit for setting up a power-on or power-off 
status condition in the particular module 
wherein said power control switching means 
resides; 

(c2) means to receive "margin" instructions from 
its local slave logic unit to increased ecrease the 
voltage output of a selected local power supply; 
and 

(d) a plurality of local power supplies connected to a 
local AC power source located in each module and 
wherein the power status of each supply and each 
AC source is controlled by said power control 
switching 1 
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